$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa File: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (raw, json) Hash identifier: h7xYjY2rSrypwrtAaCJNOBDWvvePrLWeM/3ttCwxhtM= Subject key identifier: 5F:EE:EB:1C:BA:CA:C5:D9:B2:E0:1B:01:E2:B4:FE:60:B0:40:76:07 Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 1CF7DB5DFCC110F6608E4D9DD4BD219FBF2987C5 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa Signing time: Fri 25 Aug 2023 02:00:00 +0000 ROA not before: Fri 25 Aug 2023 01:55:00 +0000 ROA not after: Fri 23 Aug 2024 02:00:00 +0000 asID: 140384 IP address blocks: 103.149.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f7:db:5d:fc:c1:10:f6:60:8e:4d:9d:d4:bd:21:9f:bf:29:87:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Aug 25 01:55:00 2023 GMT Not After : Aug 23 02:00:00 2024 GMT Subject: CN=5FEEEB1CBACAC5D9B2E01B01E2B4FE60B0407607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:2f:0a:c9:4e:e6:22:66:bf:b1:5f:a6:21: 0b:56:f2:a3:6b:0e:20:94:63:23:38:ce:b8:3e:89: 61:69:ee:75:b5:72:87:ac:f9:36:c6:b9:15:55:af: f4:29:43:f7:d6:52:b1:3d:18:24:39:7e:e2:76:8b: 21:5b:0d:8a:ab:22:41:a4:81:e8:2b:e5:65:a4:66: ce:a5:f1:8e:0a:e3:ba:8e:5c:ce:ba:11:0a:e6:5b: 9f:9b:a2:86:ad:6d:02:94:96:50:01:90:6a:c8:0a: 2f:5e:ff:cd:e3:f4:a2:2a:06:fd:04:54:8a:4b:25: f2:34:12:82:53:cf:56:5f:c7:32:5a:2d:00:9d:e0: ed:bd:21:dd:2f:3f:af:bb:97:16:4b:6e:97:aa:4f: 23:49:10:ff:ac:86:95:8e:80:a7:f0:b3:6d:28:a4: 53:d4:05:08:c5:21:4a:35:61:4e:07:91:0c:6e:cc: 70:61:fa:19:e5:86:0c:e9:19:95:2f:12:2a:7d:1b: 40:0e:6c:f6:a3:e7:7f:71:5b:79:08:82:32:7e:26: b9:b8:e2:16:27:ca:2e:47:4f:0b:d9:40:82:52:90: 61:28:c2:5a:a0:26:a2:03:b0:b4:0e:55:c2:48:eb: 4e:53:87:ed:26:3c:1b:fa:40:60:6c:da:99:05:f9: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:EB:1C:BA:CA:C5:D9:B2:E0:1B:01:E2:B4:FE:60:B0:40:76:07 X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.238.0/23 Signature Algorithm: sha256WithRSAEncryption b5:2a:72:f4:6b:46:14:c4:c4:6d:e4:46:5b:96:8e:04:b8:ec: 9b:82:bb:0a:52:0d:b0:18:b6:9f:04:06:73:f6:94:9a:02:96: 12:cd:37:62:d9:67:f1:3d:32:a9:01:43:ba:9c:fd:a2:f6:2b: b8:4b:af:1b:52:fc:17:08:4b:35:ae:f3:20:97:7f:ba:99:4e: e3:a6:e1:54:73:8c:e5:2e:56:10:cc:b4:47:e2:3e:32:d9:1b: 42:54:c3:57:72:55:ce:ec:f9:54:bd:6e:59:72:03:e9:27:e0: dc:4c:cb:21:6a:6b:31:16:5b:9a:b5:f5:1e:39:ad:f8:43:b7: a9:85:fc:5d:09:1d:54:1d:c6:bc:75:4f:60:94:46:ac:d5:ea: 82:7b:74:b0:93:63:21:a9:84:52:75:13:d1:bc:a8:06:60:9e: fe:f4:06:1a:6c:2e:6d:53:c5:bc:dc:93:ce:07:ad:96:5a:aa: f0:1b:3f:57:c3:e7:a8:1a:1c:5f:94:aa:51:59:64:af:d8:ab: 7f:74:d6:07:1a:65:06:9e:50:78:0a:e0:e4:eb:d6:99:48:36: 2b:f3:54:ed:95:53:71:a1:14:e5:96:21:c4:23:55:b4:46:e6: e6:7f:d1:b9:06:55:5e:46:45:16:0c:e4:0e:e3:34:df:c9:0f: ed:b5:03:52 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHPfbXfzBEPZgjk2d1L0hn78ph8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yMzA4MjUwMTU1MDBaFw0yNDA4MjMwMjAwMDBaMDMxMTAvBgNV BAMTKDVGRUVFQjFDQkFDQUM1RDlCMkUwMUIwMUUyQjRGRTYwQjA0MDc2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvS8KyU7mIma/sV+mIQtW8qNr DiCUYyM4zrg+iWFp7nW1coes+TbGuRVVr/QpQ/fWUrE9GCQ5fuJ2iyFbDYqrIkGk gegr5WWkZs6l8Y4K47qOXM66EQrmW5+booatbQKUllABkGrICi9e/83j9KIqBv0E VIpLJfI0EoJTz1ZfxzJaLQCd4O29Id0vP6+7lxZLbpeqTyNJEP+shpWOgKfws20o pFPUBQjFIUo1YU4HkQxuzHBh+hnlhgzpGZUvEip9G0AObPaj539xW3kIgjJ+Jrm4 4hYnyi5HTwvZQIJSkGEowlqgJqIDsLQOVcJI605Th+0mPBv6QGBs2pkF+Vp9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUX+7rHLrKxdmy4BsB4rT+YLBAdgcwHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwZDM0ZTc3LTZjZjYtNDE4Ny05 MDgzLTFjN2E4ODE5ZTk2NS8wLzMxMzAzMzJlMzEzNDM5MmUzMjMzMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnle4wDQYJ KoZIhvcNAQELBQADggEBALUqcvRrRhTExG3kRluWjgS47JuCuwpSDbAYtp8EBnP2 lJoClhLNN2LZZ/E9MqkBQ7qc/aL2K7hLrxtS/BcISzWu8yCXf7qZTuOm4VRzjOUu VhDMtEfiPjLZG0JUw1dyVc7s+VS9bllyA+kn4NxMyyFqazEWW5q19R45rfhDt6mF /F0JHVQdxrx1T2CURqzV6oJ7dLCTYyGphFJ1E9G8qAZgnv70BhpsLm1Txbzck84H rZZaqvAbP1fD56gaHF+UqlFZZK/Yq3901gcaZQaeUHgK4OTr1plINivzVO2VU3Gh FOWWIcQjVbRG5uZ/0bkGVV5GRRYM5A7jNN/JD+21A1I= -----END CERTIFICATE-----Generated at Sun Jun 2 07:02:56 2024 by rpki-client on console-fra.rpki-client.org